This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 5%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Active Directory operation failed on… This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-03152DCD, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
I am getting the above message whenever I am trying to create a "User Mailbox" or give an existed user "send-as" or "receive as" permission for a Distribution Group in Exchange Server. Due to this message, I am not even sure how many service-access might be denied. Help me find a solution, please!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 67%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Does the suggestion below from Andy help?
Here is a thread discussed the similar issue which was caused by the "Exchange Trusted Subsystem" AD group doesn't have permissions to the AD object you are trying to manage.
Issue deleting Mailbox – Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Any progress here about this issue so far? Have you tried creating a new OU in your environment?
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Is your issue resolved now? I am writing to see how everything is going on with this thread. If you still have further concern on this, please feel free to let us know.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Thank you gentleman @Andy David - MVP for your answer!
Actually, I have been practicing Exchange Server thingy on my VMWare environment. Before I looked for help from here the Microsoft community regarding this issue, I deleted the above-mentioned Distribution Group and then I tried to create another Distribution Group and got this message again. Then I tried several things like creating a new User Mailbox and got the same message again.
So, I couldn't really try the solution you gave me since there is no OU and Distribution Group in my VMWare environment right now. Could you plz help me with this specific solution that I can create a new User Mailbox first and hopefully the other solutions will already be there in the line?
You can apply those changes directly to the group as well if you want.
But to make it easier, may just create a new OU, make the changes and then create the new group in that OU.
@Andy David - MVP ,
Does the Step #9 is really necessary to delete all default permissions ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 89%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOA%3C/text%3E%3C/svg%3E)
Hello, everyone.
Can anyone confirm if Andy's solution worked or not?
